Re: Hard Drive Destruct System?

From: Bill Unruh (unruh_at_string.physics.ubc.ca)
Date: 11/28/04


Date: 28 Nov 2004 18:57:35 GMT

roberson@ibd.nrc-cnrc.gc.ca (Walter Roberson) writes:

]In article <coas47$ijt$1@panix5.panix.com>, Al Dykes <adykes@panix.com> wrote:
]|In article <coaok5$eb0$1@canopus.cc.umanitoba.ca>,
]|Walter Roberson <roberson@ibd.nrc-cnrc.gc.ca> wrote:

]|>In practice, you can't use a single encryption over a whole drive,
]|>because you have to be able to randomly read or wrote from the middle of
]|>it without having to decrypt everything before that point (read) or
]|>re-encrypt everything after that point (write.) And directory structures

]|Offhand I can't see any problem with en/decrypting data in 512 byte
]|blocks as sectors are read/written to disk.

]If you are using the same key each time, that scheme would suffer
]a lot from "known plaintext" attacks. For example,
]All blocks of NULLs would encrypt exactly the same way, and
]the first 64 bytes of most non-text files would be relatively
]consistant amongst filetypes, allowing you a fairly good idea
]of what kind of file something was without decrypting it.

A lot less than if it was in the clear. And if they used a chaining scheme
even the nulls would not encrypt the same way.
C_i=Crypt(C_(i-1)^M_i), M_i= DeCrypt(C_i)^C_(i-1).
 Most crypto schemes are
specifically designed to resist known plaintext attacks.



Relevant Pages

  • Re: Is there any asymmetric crypto API to allow decrypting a message but not encrypting it?
    ... What I want is a scheme to use two set of keys for encryption/decryption. ... I don't exactly need to use RSA if it cannot do the thing I want, ... Person A can use Key-1 to encrypt, ... private key enables anyone to compute the public key easily. ...
    (microsoft.public.dotnet.security)
  • Re: Is there any asymmetric crypto API to allow decrypting a message but not encrypting it?
    ... What I want is a scheme to use two set of keys for encryption/decryption. ... I don't exactly need to use RSA if it cannot do the thing I want, ... Person A can use Key-1 to encrypt, ... private key enables anyone to compute the public key easily. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Does OTP need authentication?
    ... I presume you mean "keyed MAC of the ... Oh, well, if you encrypt, and then MAC the result, that provides ... both message integrity and message authenticity. ... public-key encryption scheme; the receiver has no idea who the message ...
    (sci.crypt)
  • Re: confidentiality and integrity
    ... >I think the scheme being proposed is something like this. ... Encrypt with AES-ECB. ... >are still all zero before believing the message. ...
    (sci.crypt)
  • Re: "Rule 30" CA encryption implementation
    ... Well...I'm not totally ignorant about one-way transformations...it's ... >> The output file will appear random irregardless ... my scheme will cause any ordered data-file to appear random. ... Take a file that contains 5000 identical bytes…then encrypt it using ...
    (sci.crypt)